Overview
overview
10Static
static
3σUŞe_~~1...σ.zip
windows7-x64
1σUŞe_~~1...σ.zip
windows10-2004-x64
1σUŞe_~~1...σ.zip
windows7-x64
1σUŞe_~~1...σ.zip
windows10-2004-x64
1Register.dll
windows7-x64
3Register.dll
windows10-2004-x64
3Resource/C...tity-H
windows7-x64
1Resource/C...tity-H
windows10-2004-x64
1Resource/C...tity-V
windows7-x64
1Resource/C...tity-V
windows10-2004-x64
1Resource/C...BK-EUC
windows7-x64
1Resource/C...BK-EUC
windows10-2004-x64
1Resource/C...TF16-H
windows7-x64
1Resource/C...TF16-H
windows10-2004-x64
1Resource/C...TF16-V
windows7-x64
1Resource/C...TF16-V
windows10-2004-x64
1Resource/F...td.otf
windows7-x64
4Resource/F...td.otf
windows10-2004-x64
7Resource/F...ld.otf
windows7-x64
4Resource/F...ld.otf
windows10-2004-x64
7Resource/F...ue.otf
windows7-x64
4Resource/F...ue.otf
windows10-2004-x64
7Resource/F...ue.otf
windows7-x64
4Resource/F...ue.otf
windows10-2004-x64
7Resource/F...td.otf
windows7-x64
4Resource/F...td.otf
windows10-2004-x64
7Resource/F...ld.otf
windows7-x64
4Resource/F...ld.otf
windows10-2004-x64
7Set-up.exe
windows7-x64
3Set-up.exe
windows10-2004-x64
10ccme_ecc.dll
windows7-x64
1ccme_ecc.dll
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19-11-2024 16:35
Static task
static1
Behavioral task
behavioral1
Sample
σUŞe_~~19111547~~__Asπσ_Pswd_σ.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
σUŞe_~~19111547~~__Asπσ_Pswd_σ.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
σUŞe_~~19111547~~__Asπσ_Pswd_σ.zip
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
σUŞe_~~19111547~~__Asπσ_Pswd_σ.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Register.dll
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
Register.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Resource/CMap/Identity-H
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Resource/CMap/Identity-H
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Resource/CMap/Identity-V
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Resource/CMap/Identity-V
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Resource/CMap/UCS2-GBK-EUC
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
Resource/CMap/UCS2-GBK-EUC
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Resource/CMap/UniKS-UTF16-V
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Resource/CMap/UniKS-UTF16-V
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Resource/Font/AdobePIStd.otf
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Resource/Font/AdobePIStd.otf
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Resource/Font/CourierStd-Bold.otf
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Resource/Font/CourierStd-Bold.otf
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Resource/Font/CourierStd-BoldOblique.otf
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Resource/Font/CourierStd-BoldOblique.otf
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Resource/Font/CourierStd-Oblique.otf
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Resource/Font/CourierStd-Oblique.otf
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Resource/Font/CourierStd.otf
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Resource/Font/CourierStd.otf
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Resource/Font/MinionPro-Bold.otf
Resource
win7-20241023-en
Behavioral task
behavioral28
Sample
Resource/Font/MinionPro-Bold.otf
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Set-up.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Set-up.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
ccme_ecc.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
ccme_ecc.dll
Resource
win10v2004-20241007-en
General
-
Target
σUŞe_~~19111547~~__Asπσ_Pswd_σ.zip
-
Size
15.2MB
-
MD5
725813ffbad99757742c0e0758e5a645
-
SHA1
314f87de8331e988f2430be0b2937e90d821c212
-
SHA256
a6d5559e3539bef714539378b7ef72a6231615c3b008009f896ad9c0f6131374
-
SHA512
66802cbb850398980d35d4162dc7abf4cc3e463d28b462bc9224e553a2ce65217a5dfb8329b7f761d635f264a139784121b3afe8939020ff914d5ce2f4138929
-
SSDEEP
393216:0r8ndxvQnt2SdSXQVmSlOiOY5uv3t0ryaTRLcn4h30dF/q:q8QdSqoiOH3t+Z730r/q
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
7zFM.exepid Process 2072 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 2072 7zFM.exe Token: 35 2072 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 2072 7zFM.exe